Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: aka9xl20egLP+F+9F4lydxAobYG6q7t/Xm1Uqv0fHN4=
Subject key identifier: E1:B8:3E:36:47:65:50:BD:E0:D2:F2:6E:09:DB:BE:D8:A9:50:4B:47
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 01A1DF4CAEE38691F173649CEE5B78B69A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 1243
Signing time: Sun 15 Nov 2026 13:01:46 +0000
Manifest this update: Sun 15 Nov 2026 13:01:46 +0000
Manifest next update: Mon 16 Nov 2026 13:01:46 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: wxxoQLrvKewE77L7/l8fMpdXfVCAPZhTIpjBeDS9Rp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:ae:e3:86:91:f1:73:64:9c:ee:5b:78:b6:9a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Nov 15 13:01:46 2026 GMT
Not After : Nov 16 13:01:46 2026 GMT
Subject: CN=e1b83e36476550bde0d2f26e09dbbed8a9504b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:46:14:fe:01:b7:a7:48:75:58:6b:34:1e:
44:fd:3d:fc:40:3c:98:d0:49:67:60:f3:bf:df:f1:
d8:e8:c1:f3:48:2a:7a:0c:d6:9a:26:e8:fc:2c:d9:
ee:05:07:20:6a:d9:29:50:c2:7a:84:22:2c:de:09:
5c:79:29:c0:5b:71:97:05:41:72:33:dc:24:3b:b1:
ee:9a:ea:a0:87:93:54:89:73:48:15:4a:5c:a8:54:
30:c3:91:1d:46:be:6f:10:7a:25:2e:fb:de:8d:93:
38:e9:0e:7e:55:fd:ce:49:b7:39:36:bb:36:85:6e:
91:91:9f:a1:ff:cb:d3:7d:0c:7d:4d:aa:49:94:66:
4c:dd:e5:e0:7e:4e:4a:b8:40:6d:0d:af:58:70:73:
63:ce:08:5e:69:5a:dd:ba:44:97:91:b1:9e:20:e3:
9b:0b:b6:63:f8:e5:db:45:f2:35:00:49:c9:b5:b1:
d0:66:b1:f8:d9:91:9c:96:24:14:fa:17:48:90:61:
85:28:9d:c0:de:99:82:67:07:25:72:7d:de:ac:7a:
8f:8d:4a:9a:9b:04:b4:8f:e0:90:47:11:46:26:6b:
ef:01:5d:81:18:12:4e:92:96:7d:cc:2b:46:7c:c1:
52:24:e8:74:13:46:81:e1:77:fb:e1:38:3f:bc:39:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:3E:36:47:65:50:BD:E0:D2:F2:6E:09:DB:BE:D8:A9:50:4B:47
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5b:ba:df:f3:20:8c:28:a0:ae:8f:fb:48:29:f2:06:31:98:
a9:e6:ce:a0:21:42:81:28:c5:df:11:30:93:1a:46:6c:0e:8c:
a6:eb:e0:5b:00:2e:70:53:0c:d4:ef:d0:e5:34:8e:a1:c7:c8:
ed:af:1d:e9:a6:90:4e:21:10:c5:75:e2:c3:80:89:a9:d8:2f:
e3:c4:64:ee:71:f4:8f:17:fc:2a:87:60:77:d9:7c:a6:e4:eb:
32:4a:49:33:2e:46:d3:a8:14:3b:a4:a3:16:f1:ce:d4:b5:8b:
ea:4a:85:61:a4:02:0f:2c:8a:bf:e3:da:7e:c2:df:6a:63:75:
2a:ee:07:56:63:73:fe:d2:97:7a:ff:b0:12:d5:2f:a7:a4:e4:
82:16:fd:a8:c6:9c:61:b5:a6:21:da:3d:e0:69:d4:fb:07:3c:
78:3d:77:fc:47:2e:fd:7e:8b:00:61:2d:2a:d6:e8:60:f2:a3:
a9:ef:77:4e:79:fc:40:a4:74:7f:1b:dd:ba:3d:16:44:c2:1a:
b4:f6:2b:8f:27:9b:42:ec:ee:fb:13:97:35:33:8c:f8:ed:e3:
5a:0c:de:d7:09:8d:47:ff:3f:dc:1d:38:ec:bd:f9:c0:3f:83:
a9:89:ae:0a:7c:51:28:a0:b6:ee:64:5c:af:a8:f4:55:f2:85:
34:67:b9:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfTK7jhpHxc2Sc7lt4tpovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2M2Y4ZTQyZmI4NDQyYTQ4YTdkNDdlZjRjMGI2ZTE0NzUx
NGJmYzQwHhcNMjYxMTE1MTMwMTQ2WhcNMjYxMTE2MTMwMTQ2WjAzMTEwLwYDVQQD
EyhlMWI4M2UzNjQ3NjU1MGJkZTBkMmYyNmUwOWRiYmVkOGE5NTA0YjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXNGFP4Bt6dIdVhrNB5E/T38QDyY
0ElnYPO/3/HY6MHzSCp6DNaaJuj8LNnuBQcgatkpUMJ6hCIs3glceSnAW3GXBUFy
M9wkO7Humuqgh5NUiXNIFUpcqFQww5EdRr5vEHolLvvejZM46Q5+Vf3OSbc5Nrs2
hW6RkZ+h/8vTfQx9TapJlGZM3eXgfk5KuEBtDa9YcHNjzgheaVrdukSXkbGeIOOb
C7Zj+OXbRfI1AEnJtbHQZrH42ZGcliQU+hdIkGGFKJ3A3pmCZwclcn3erHqPjUqa
mwS0j+CQRxFGJmvvAV2BGBJOkpZ9zCtGfMFSJOh0E0aB4Xf74Tg/vDknywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOG4PjZHZVC94NLybgnbvtipUEtHMB8GA1UdIwQY
MBaAFNY/jkL7hEKkin1H70wLbhR1FL/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODct
MmVkN2E3MTVmOGQ3LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODctMmVkN2E3MTVmOGQ3
LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFu63/Mg
jCigro/7SCnyBjGYqebOoCFCgSjF3xEwkxpGbA6MpuvgWwAucFMM1O/Q5TSOocfI
7a8d6aaQTiEQxXXiw4CJqdgv48Rk7nH0jxf8Kodgd9l8puTrMkpJMy5G06gUO6Sj
FvHO1LWL6kqFYaQCDyyKv+PafsLfamN1Ku4HVmNz/tKXev+wEtUvp6Tkghb9qMac
YbWmIdo94GnU+wc8eD13/Ecu/X6LAGEtKtboYPKjqe93Tnn8QKR0fxvduj0WRMIa
tPYrjyebQuzu+xOXNTOM+O3jWgze1wmNR/8/3B047L35wD+DqYmuCnxRKKC27mRc
r6j0VfKFNGe5ZA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:26:22 2026 by rpki-client